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Amendments to the Specification 

Please replace the paragraph at page 5, line 21 - page 6, line 2 with the 
following amended paragraph: 

The database management method and apparatus according to the present 
invention are illustrated in Fig. 1 . The database management apparatus system 1 30 
is composed of a computer svste m svstem 110 , which includes a GWCPLMOO, a 
memory including UAP 120 . a terminal devie edevice 1 50 . and a harddisk device. A 
d i ct i onary dictionary 160 is allocated on the harddisk device and is operated on an 
operating Gvstomsvstem 140 . The d i ctionary dictionary 160 stores a logical 
database saving area and definition information of a table and the saving area. 

Please replace the paragraph at page 6, lines 3-28, with the following 
amended paragraph: 

The d i ctionary dictionary 160 stores a databas e database 1 70 design 
specification including a table structure, a column definition, an index definition, and 
so forth of the database. The information stored in the dictionary is required in 
referring to or updating the database. The dictionary table for managing the 
tamperproof information, which is the feature of the present invention, is made up of 
a table name column, an insert-only attribute column, a row deletion prohibiting 
period column, and a column of row insertion date and time holding column names, 
which are stored in the dictionary. The dictionary table corresponds to the table 202 
in Fig. 2. The present invention is now being described with an example of a 
relational database. In action, however, the present invention may be applied not 
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only to the relational database but also any other kind of database. Herein, the term 
"interpolation prevention" means an access right that is functioned to disallow 
change of the data registered in the database even by a database owner and a 
person to which an access right is authorized cannot be changed by the database 
owner and the person to whom the access right is authorized by the database 
owner. This insert-only attribute cannot be changed by the database owner and the 
person to whom the access right is authorized by the database owner. Only the 
manager on the upper database level can change the attribute. 

Please replace the paragraph at page 9, line 12 - page 1 0, line 8 with the 
following amended paragraph: 

Fig. 3 shows the flow of a process of inserting data into the table. In the case 
of inserting the data into the table, at first, it is checked if the table includes the 
insert-only attribute (301). If the table includes no insert-only attribute, the process of 
inserting the data is executed as it is (304). If the table includes the insert-only 
attribute, it is checked if the row deletion prohibition period is specified (302). If in 
the step 302 the table includes the row deletion prohibition period specified thereto, 
the data inserting process is executed. If the table includes the specification of the 
row deletion prohibition period in the step 302, the data (time stamp) to be saved in 
the row insertion history holding column is created (303) . and then the data inserting 
process is executed. Herein, the user disables to specify the data to be saved in the 
row insertion history holding column. If the user specifies the data, the specified 
value is ignored and the data created by the system is saved. As the concrete data, 
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in the table 2 shown in Fig. 4, the "001" row of the "carte ID" column is inserted on 
June 1 , 2002. Likewise, the "002" row of the "carte ID" column is inserted on June 
10, 2002, and the "003" row of the "cart4e ID" column is inserted on June 18, 2002. 

Please replace the paragraph at page 1 1 , line 28 - page 13, line 9 with the 
following amended paragraph: 

Fig. 6 shows a flow of a process of deleting a row. In the case of requesting 
the row deletion, it is checked if the table includes the insert-only attribute (601). If 
the table includes no insert-only attribute, it is checked if the executor of the row 
deletion is a table owner (602). If yes, the row deletion process is executed (604). If 
no, it is checked if the row deletion executor is given a row deletion right to the 
concerned table by the table owner (603). If ves. deletion processing is executed 
(604). and if no. then the deletion processing is prohibited (605). On the other hand, 
if the table includes the insert-only attribute in the step 601 , it is checked if the table 
includes the specification of the row deletion prohibition period (606). If the table 
i nclud e s does not include t he row deletion prohibition period specified thereto, the 
deletion is disabled even for the table owner (608). If in the step 606 the table 
includes the row deletion prohibition period specified thereto, the value of the row 
deletion prohibition period column is added to the value of the row insertion date and 
time holding column included in the row to be deleted. Then, the added value is 
compared with the row deletion execution date for the purpose of checking if the 
deletion prohibition period expires (607). If the period expires as to the row, the 
process is branched into the process 602, while if the period does not expire as to 
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the row, the row deletion is disabled (608). As a concrete example, in the SQL2 
shown in Fig. 4, in the step 601 , "Yes" is given, while in the step 606, "No" is given, 
and the row deletion is disabled. In the SQL3, in the step 601 , "Yes" is given and in 
the step 606, "Yes" is also given. In the determination in the step 607, if as to a row 
the deletion prohibition period expires, "Yes" is given, and the table owner or the 
person to whom the deletion right is transferred by the table owner enables to delete 
the row, while if as to another row the prohibition period does not expire, "No" is 
given, and the row deletion is disabled. 



5 



